alleyinteractive/internal-flags

Release historycaution

This is the package's only release, published over four years ago, with no releases in the last 12 months. That limits evidence of ongoing release maintenance, although the source repository has since received activity.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, which weakens current maintenance evidence. Its recorded push in March 2025 provides some counterevidence but does not show recent continuity.

Workflow auditcaution

All four analyzed action references are unpinned, creating avoidable build reproducibility and action-substitution risk. The pull_request_target workflow has no untrusted checkout or script-injection finding, so this is a hygiene concern rather than a severe workflow risk.